From a46ff028e1bf597acd0789cfd9dd5c861eb726fc Mon Sep 17 00:00:00 2001 From: Richard Case <198425+richardcase@users.noreply.github.com> Date: Thu, 29 Jun 2023 22:26:29 +0100 Subject: [PATCH] docs: update the permissions for EKS (#689) * docs: update the permissions for EKS Added a missing permission to the example policy as this is required by the eks-operator to cleanly delete a cluster. Signed-off-by: Richard Case * syncing with versioned docs + canonical links --------- Signed-off-by: Richard Case Co-authored-by: martyav --- .../set-up-clusters-from-hosted-kubernetes-providers/eks.md | 6 ++++++ .../installation-references/amazon-eks-permissions.md | 5 +++++ .../pages-for-subheaders/amazon-eks-permissions.md | 4 ++++ .../amazon-eks-permissions/minimum-eks-permissions.md | 5 +++++ .../set-up-clusters-from-hosted-kubernetes-providers/eks.md | 6 ++++++ .../set-up-clusters-from-hosted-kubernetes-providers/eks.md | 6 ++++++ 6 files changed, 32 insertions(+) diff --git a/docs/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md b/docs/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md index 50734880ec6..09ccfc10eda 100644 --- a/docs/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md +++ b/docs/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md @@ -1,6 +1,11 @@ --- title: Creating an EKS Cluster --- + + + + + Amazon EKS provides a managed control plane for your Kubernetes cluster. Amazon EKS runs the Kubernetes control plane instances across multiple Availability Zones to ensure high availability. Rancher provides an intuitive user interface for managing and deploying the Kubernetes clusters you run in Amazon EKS. With this guide, you will use Rancher to quickly and easily launch an Amazon EKS Kubernetes cluster in your AWS account. For more information on Amazon EKS, see this [documentation](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html). @@ -124,6 +129,7 @@ Resource targeting uses `*` as the ARN of many of the resources created cannot b "ec2:DescribeAvailabilityZones", "ec2:DescribeAccountAttributes", "ec2:DeleteTags", + "ec2:DeleteLaunchTemplate", "ec2:DeleteSecurityGroup", "ec2:DeleteKeyPair", "ec2:CreateTags", diff --git a/versioned_docs/version-2.0-2.4/reference-guides/installation-references/amazon-eks-permissions.md b/versioned_docs/version-2.0-2.4/reference-guides/installation-references/amazon-eks-permissions.md index 81f0e0dafac..0a4be84aa72 100644 --- a/versioned_docs/version-2.0-2.4/reference-guides/installation-references/amazon-eks-permissions.md +++ b/versioned_docs/version-2.0-2.4/reference-guides/installation-references/amazon-eks-permissions.md @@ -2,6 +2,10 @@ title: Creating an EKS Cluster --- + + + + Amazon EKS provides a managed control plane for your Kubernetes cluster. Amazon EKS runs the Kubernetes control plane instances across multiple Availability Zones to ensure high availability. Rancher provides an intuitive user interface for managing and deploying the Kubernetes clusters you run in Amazon EKS. With this guide, you will use Rancher to quickly and easily launch an Amazon EKS Kubernetes cluster in your AWS account. For more information on Amazon EKS, see this [documentation](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html). @@ -234,6 +238,7 @@ Resource targeting uses `*` as the ARN of many of the resources created cannot b "ec2:DescribeAvailabilityZones", "ec2:DescribeAccountAttributes", "ec2:DeleteTags", + "ec2:DeleteLaunchTemplate", "ec2:DeleteSecurityGroup", "ec2:DeleteKeyPair", "ec2:CreateTags", diff --git a/versioned_docs/version-2.5/pages-for-subheaders/amazon-eks-permissions.md b/versioned_docs/version-2.5/pages-for-subheaders/amazon-eks-permissions.md index c113d497ba4..0bba238cf2f 100644 --- a/versioned_docs/version-2.5/pages-for-subheaders/amazon-eks-permissions.md +++ b/versioned_docs/version-2.5/pages-for-subheaders/amazon-eks-permissions.md @@ -2,6 +2,10 @@ title: Creating an EKS Cluster --- + + + + Amazon EKS provides a managed control plane for your Kubernetes cluster. Amazon EKS runs the Kubernetes control plane instances across multiple Availability Zones to ensure high availability. Rancher provides an intuitive user interface for managing and deploying the Kubernetes clusters you run in Amazon EKS. With this guide, you will use Rancher to quickly and easily launch an Amazon EKS Kubernetes cluster in your AWS account. For more information on Amazon EKS, see this [documentation](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html). diff --git a/versioned_docs/version-2.5/reference-guides/amazon-eks-permissions/minimum-eks-permissions.md b/versioned_docs/version-2.5/reference-guides/amazon-eks-permissions/minimum-eks-permissions.md index 1ce977a3a4d..7bf1eb72fea 100644 --- a/versioned_docs/version-2.5/reference-guides/amazon-eks-permissions/minimum-eks-permissions.md +++ b/versioned_docs/version-2.5/reference-guides/amazon-eks-permissions/minimum-eks-permissions.md @@ -2,6 +2,10 @@ title: Minimum EKS Permissions --- + + + + Documented here is a minimum set of permissions necessary to use all functionality of the EKS driver in Rancher. Additional permissions are required for Rancher to provision the `Service Role` and `VPC` resources. Optionally these resources can be created **before** the cluster creation and will be selectable when defining the cluster configuration. Resource | Description @@ -37,6 +41,7 @@ Resource targeting uses `*` as the ARN of many of the resources created cannot b "ec2:DescribeAvailabilityZones", "ec2:DescribeAccountAttributes", "ec2:DeleteTags", + "ec2:DeleteLaunchTemplate", "ec2:DeleteSecurityGroup", "ec2:DeleteKeyPair", "ec2:CreateTags", diff --git a/versioned_docs/version-2.6/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md b/versioned_docs/version-2.6/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md index e402cbde19a..b60a7871b02 100644 --- a/versioned_docs/version-2.6/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md +++ b/versioned_docs/version-2.6/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md @@ -1,6 +1,11 @@ --- title: Creating an EKS Cluster --- + + + + + Amazon EKS provides a managed control plane for your Kubernetes cluster. Amazon EKS runs the Kubernetes control plane instances across multiple Availability Zones to ensure high availability. Rancher provides an intuitive user interface for managing and deploying the Kubernetes clusters you run in Amazon EKS. With this guide, you will use Rancher to quickly and easily launch an Amazon EKS Kubernetes cluster in your AWS account. For more information on Amazon EKS, see this [documentation](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html). @@ -123,6 +128,7 @@ Resource targeting uses `*` as the ARN of many of the resources created cannot b "ec2:DescribeAvailabilityZones", "ec2:DescribeAccountAttributes", "ec2:DeleteTags", + "ec2:DeleteLaunchTemplate", "ec2:DeleteSecurityGroup", "ec2:DeleteKeyPair", "ec2:CreateTags", diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md index 50734880ec6..09ccfc10eda 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/kubernetes-clusters-in-rancher-setup/set-up-clusters-from-hosted-kubernetes-providers/eks.md @@ -1,6 +1,11 @@ --- title: Creating an EKS Cluster --- + + + + + Amazon EKS provides a managed control plane for your Kubernetes cluster. Amazon EKS runs the Kubernetes control plane instances across multiple Availability Zones to ensure high availability. Rancher provides an intuitive user interface for managing and deploying the Kubernetes clusters you run in Amazon EKS. With this guide, you will use Rancher to quickly and easily launch an Amazon EKS Kubernetes cluster in your AWS account. For more information on Amazon EKS, see this [documentation](https://docs.aws.amazon.com/eks/latest/userguide/what-is-eks.html). @@ -124,6 +129,7 @@ Resource targeting uses `*` as the ARN of many of the resources created cannot b "ec2:DescribeAvailabilityZones", "ec2:DescribeAccountAttributes", "ec2:DeleteTags", + "ec2:DeleteLaunchTemplate", "ec2:DeleteSecurityGroup", "ec2:DeleteKeyPair", "ec2:CreateTags",